Bump the go group across 1 directory with 2 updates

[dependabot]

Bumps the go group with 2 updates in the / directory: github.com/buger/jsonparser and github.com/jfrog/jfrog-cli-security.

Updates github.com/buger/jsonparser from 1.3.0 to 1.4.0

Release notes

Sourced from github.com/buger/jsonparser's releases.

v1.4.0 — 9 new APIs, 20 issues resolved

New APIs (all backward-compatible)

Iteration with error/break control

• ArrayEachErr — like ArrayEach but the callback returns error. Return io.EOF for graceful stop, any other error to abort. Resolves #53, #129, #176, #230, #255, #262.
• EachKeyErr — same pattern for EachKey.

Safe string handling

• Escape(s string) []byte — RFC 8259 string escaping (inverse of Unescape). Produces a quoted JSON string literal.
• SetString(data, val, keys...) — Set with auto-quoted value. No more invalid JSON from forgetting quotes. Resolves #144, #158, #218, #270.

Container accessors

• GetArrayLen(data, keys...) (int, error) — count array elements without a callback. Resolves #175, #261.
• GetObjectLen(data, keys...) (int, error) — count object key-value pairs.
• GetUint64(data, keys...) (uint64, error) — uint64 variant of GetInt. Resolves #271.

Delete found signal

• DeleteFound(data, keys...) ([]byte, bool) — returns whether the key was found. Resolves #229.

Wildcard paths

• EachKeyWildcard, ArrayEachWildcard, SetWildcard — [*] path component to iterate/set all elements. Resolves #112.

  jsonparser.SetWildcard(data, []byte("true"), "users", "[*]", "active")

JSONPath compiled paths

• ParsePath("$.users[0].name") → []string{"users", "[0]", "name"}
• CompilePath + CompiledPath — pre-compile and reuse with Get/Set/Delete/etc. Resolves #234, #251.

  path, _ := jsonparser.CompilePath("$.person.name.fullName")
  name, _ := path.Get(data)  // reuse across calls

Fixes

• EachKey no longer panics with >64 key components (#56)
• Set pre-allocates output buffer, reducing allocations from 6 to 1 (#107)

Proof coverage

• 3 new SYS-REQs (112: container length, 113: wildcard paths, 114: compiled paths)
• 121 total requirements, 0 errors, 0 warnings, 384 MC/DC witness rows (0 uncovered)
• All new APIs traced via source-native annotations

Acknowledgments

Implemented by codex (gpt-5-codex) via codex exec. Proof coverage by ReqProof.

Full changelog: CHANGELOG.md

v1.3.1 — Bug fixes + proof strengthening

Bug fixes

... (truncated)

Changelog

Sourced from github.com/buger/jsonparser's changelog.

Changelog

Commits

• f6ddf26 v1.4.0: ArrayEachErr, Escape/SetString, wildcards, JSONPath, GetArrayLen, Get...
• eb9c252 v1.3.1: fix Set aliasing (#209/#141), EachKey array-index (#232), benchmark f...
• See full diff in compare view

Updates github.com/jfrog/jfrog-cli-security from 1.31.3 to 1.31.4

Release notes

Sourced from github.com/jfrog/jfrog-cli-security's releases.

v1.31.4

What's Changed

Improvements 🌱

• XRAY-156157 - Obtain configuration by workspace by @​VidrevichMichael in jfrog/jfrog-cli-security#805
• Updates dependencies by @​attiasas in jfrog/jfrog-cli-security#809

Bug Fixes 🛠

• Run JAS scans if requested on WD that has no tech, always by @​attiasas in jfrog/jfrog-cli-security#811

New Contributors

• @​VidrevichMichael made their first contribution in jfrog/jfrog-cli-security#805

Full Changelog: jfrog/jfrog-cli-security@v1.31.3...v1.31.4

Commits

• 68b5106 Updates dependencies (#809)
• bfe9913 XRAY-156157 - Obtain configuration by workspace (#805)
• ab1b7e7 Run JAS scans if requested on WD that has no tech, always (#811)
• 549897e Update checkout to V7 and add input, remove unused workflow (#807)
• See full diff in compare view